Security audit

CodivUpload Social Manager

Security checks for vulnerabilities and agentic risk

Overview

The skill is purpose-aligned for social media management, but it can act on real public accounts and contains inconsistent unpinned MCP execution guidance that could expose its API key.

Install only if you are comfortable giving CodivUpload an API key that can affect real social accounts. Use a single-platform or per-workspace key, avoid global account keys unless you intentionally need account or billing changes, and do not run unpinned npx or package install commands in the same environment as CODIVUPLOAD_API_KEY. Review every publish, bulk, livestream, delete, and billing approval prompt carefully, and remember scheduled posts and livestreams can continue until canceled or stopped.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:757
Finding: Unpinned Execution of a Credentialed Third-Party npm Package
Content: View full analysis
Vulnerability Details

File Location: SKILL.md:280-288, SKILL.md:318-323, SKILL.md:757-759; README.md:156-173, README.md:242
Vulnerability Type: Third-party dependency and supply-chain risk
Risk Level: Medium

Vulnerable Code Snippets

SKILL.md:280-288:

markdown
### Optional MCP server provenance (`codivupload-mcp`) - Official package: [`codivupload-mcp` on npm](https://www.npmjs.com/package/codivupload-mcp), maintained by Codivion LLC, source at [github.com/Codivion/codivupload-mcp](https://github.com/Codivion/codivupload-mcp). - **Always use an exact version pin** for credentialed runtimes — not `^`, not `~`, not `latest`. - Currently reviewed pinned version: `2.0.0` - Publisher (verify): `codivion <accounts@codivion.com>` — `npm view codivupload-mcp publisher` - Integrity sha512 (verify): `pK0r8XkR2M/brfn1Nsy6Uh7nGDx5qpx9h3pLgZljYkU3pv0BXKb7uJapBOFL11mBIQhWAl0hASxxCSLE11SDfA==` — `npm view codivupload-mcp@2.0.0 dist.integrity` - Install command: `npm install -g codivupload-mcp@2.0.0` - **Avoid `npx -y codivupload-mcp` without a pinned version** — the `-y` flag auto-accepts any version that resolves, which is a bad fit for a credentialed runtime. - The MCP server inherits the API key from your OpenClaw config — no separate credential surface, but the inheritance is why the version pin matters: a compromised future release would receive your live `CODIVUPLOAD_API_KEY`.

SKILL.md:318-323:

markdown
**Optional companion package:** - `codivupload-mcp` (npm) — drop-in MCP server. **Use an exact version pin** (no caret, no tilde, no `latest`): - Reviewed pinned version: `2.0.0` - Publisher: `codivion <accounts@codivion.com>` (verify with `npm view codivupload-mcp publisher`) - Tarball integrity (sha512): `pK0r8XkR2M/brfn1Nsy6Uh7nGDx5qpx9h3pLgZljYkU3pv0BXKb7uJapBOFL11mBIQhWAl0hASxxCSLE11SDfA==` (verify with `npm view codivupload-mcp@2.0.0 dist.integrity`) - Install: `npm install -g codivupload-mcp@2.0.0` — ...[truncated 4754 chars]
Remediation: View remediation
Remediation Suggestions

Replace every floating invocation with an exact version:

bash
npx --yes codivupload-mcp@2.0.0

Pin SDK references as well:

bash
npm install codivupload@<reviewed-version> pip install codivupload==<reviewed-version>

Remove or revise README.md:242 and SKILL.md:759 so they cannot override the otherwise consistent pinning guidance.

Avoid global installation where possible. Run the package in an isolated environment with:

A dedicated unprivileged operating-system account

Minimal filesystem access

Egress restricted to documented CodivUpload endpoints

No unrelated environment variables or credentials

A single-platform or per-workspace API key

Make integrity verification enforceable rather than advisory:

Download the exact package tarball without executing it.

Calculate its SHA-512 digest locally.

Compare it with a trusted digest stored in the reviewed Skill.

Abort on any mismatch.

Execute only the verified artifact.

Prefer a lockfile-backed local installation over npx registry resolution. Commit the package name, exact version, resolved URL, and integrity metadata.

Audit the external MCP package independently because its source is outside this project. Repeat that review before changing the pinned version.

Rotate CODIVUPLOAD_API_KEY immediately if an untrusted package version has run. Review API activity and connected social accounts for unauthorized actions.

Keep the MCP package optional and prefer direct, narrowly scoped REST calls when MCP functionality is unnecessary.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Rogue AgentSelf-Modification, Session Persistence
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (34)

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 80% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · README.md (reported line 143)May include surrounding context.
md
- **Schedule posts** to any of the 7+ launched social platforms (with Bluesky in active rollout) — platform-specific overrides per platform - **Help draft and queue** YouTube Shorts, TikToks, and Reels via the REST API (the skill defaults to scheduled / draft modes; bulk operations require explicit user confirmation up front) - **Set up 24/7 YouTube live streams** with managed live stream relay (always confirmation-gated; the skill includes the `DELETE /v1/livestreams/{id}` stop instruction whenever it starts a stream) - **Pull cross-platform analytics** for engagement, growth, best-time-to-post (read-only) - **Manage agency client profiles** with whitelabel branding - **Use BYOP** (Bring Your Own Project) for dedicated YouTube quota

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 80% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 247)May include surrounding context.
md
- **Schedule posts** to any of the 7+ launched social platforms (with Bluesky in active rollout) — platform-specific overrides per platform - **Help draft and queue** YouTube Shorts, TikToks, and Reels via the REST API (the skill defaults to scheduled / draft modes; bulk operations require explicit user confirmation up front) - **Set up 24/7 YouTube live streams** with managed live stream relay (always confirmation-gated; the skill includes the `DELETE /v1/livestreams/{id}` stop instruction whenever it starts a stream) - **Pull cross-platform analytics** for engagement, growth, best-time-to-post (read-only) - **Manage agency client profiles** with whitelabel branding - **Use BYOP** (Bring Your Own Project) for dedicated YouTube quota

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 80% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 208)May include surrounding context.
md
| Publish a post to one connected platform | OpenClaw per-tool approval prompt + server-side key-scope check | Show the exact post body, target profile, target platform, schedule, and any media URLs to the user. Wait for explicit user approval before executing. Prefer scheduled / draft over immediate publish unless user has asked for immediate. | | Cross-post to multiple platforms in one call | OpenClaw per-tool approval + key-scope check | Recommend a single-platform smoke test first when the user is configuring CodivUpload for the first time. Repeat platform list back to user for confirmation before fan-out. | | Bulk publish (≥3 posts in one tool call) | OpenClaw per-tool approval + key-scope check | Default to small batches. Surface a count + dry-run summary ("I'll create 50 YouTube Shorts spaced 1h apart starting 2026-05-08T09:00Z — proceed?") and only continue after explicit user consent. Never automatic. | | Start a 24/7 YouTube live stream | OpenClaw per-tool approval + key-scope check | Always surface the source URL, privacy, scheduled start time, AND the explicit stop instruction (`DELETE /v1/livestreams/{stream_id}` or Dashboard → Live Streams → Stop) before executing. Record the returned stream_id back to the user. | | Read analytics (engagement, growth, best-time-to-post) | OpenClaw per-tool approval + key-scope check | Read-only — no workflow caveats. | | Profile / workspace management (create, move, delete, role change) | OpenClaw per-tool approval + key-scope check | Surface what changes (which profile, which workspace, what role moves to whom) and wait for explicit user approval. | | Billing-impacting actions (extra profile, extra livestream, plan change) | **OpenClaw per-tool approval + server-side key-scope check** — a per-workspace or posting-only key returns `403 scope_exceeded` here. **The recommended-tier key technically blocks these, regardless of any markdown text.** | Surface the exact monthly + yearly delta (yearly = 10 months pricing, so 2 ...[truncated 25 chars]

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 80% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 267)May include surrounding context.
md
| Publish a post to one connected platform | OpenClaw per-tool approval prompt + server-side key-scope check | Show the exact post body, target profile, target platform, schedule, and any media URLs to the user. Wait for explicit user approval before executing. Prefer scheduled / draft over immediate publish unless user has asked for immediate. | | Cross-post to multiple platforms in one call | OpenClaw per-tool approval + key-scope check | Recommend a single-platform smoke test first when the user is configuring CodivUpload for the first time. Repeat platform list back to user for confirmation before fan-out. | | Bulk publish (≥3 posts in one tool call) | OpenClaw per-tool approval + key-scope check | Default to small batches. Surface a count + dry-run summary ("I'll create 50 YouTube Shorts spaced 1h apart starting 2026-05-08T09:00Z — proceed?") and only continue after explicit user consent. Never automatic. | | Start a 24/7 YouTube live stream | OpenClaw per-tool approval + key-scope check | Always surface the source URL, privacy, scheduled start time, AND the explicit stop instruction (`DELETE /v1/livestreams/{stream_id}` or Dashboard → Live Streams → Stop) before executing. Record the returned stream_id back to the user. | | Read analytics (engagement, growth, best-time-to-post) | OpenClaw per-tool approval + key-scope check | Read-only — no workflow caveats. | | Profile / workspace management (create, move, delete, role change) | OpenClaw per-tool approval + key-scope check | Surface what changes (which profile, which workspace, what role moves to whom) and wait for explicit user approval. | | Billing-impacting actions (extra profile, extra livestream, plan change) | **OpenClaw per-tool approval + server-side key-scope check** — a per-workspace or posting-only key returns `403 scope_exceeded` here. **The recommended-tier key technically blocks these, regardless of any markdown text.** | Surface the exact monthly + yearly delta (yearly = 10 months pricing, so 2 ...[truncated 25 chars]

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 80% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 268)May include surrounding context.
md
### Stopping persistent actions - **Live streams** — `DELETE /v1/livestreams/{stream_id}` stops a 24/7 broadcast immediately, or stop from dashboard → Live Streams → Stop. Always include this stop instruction whenever you start a stream. - **Scheduled posts** — `DELETE /v1/posts/{post_id}` cancels a queued post before its `scheduled_date`. After publish, deletion only removes from CodivUpload's tracking — it does NOT pull the post from the platform. - **Recurring / bulk jobs** — there is no single "stop the bulk run" call; cancel each `post_id` individually. This is why bulk operations need explicit confirmation up front. ### Credential handling

Session Persistence

Medium

Category: Rogue Agent
Confidence: 60% confidence
Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Content: Scanner excerpt · README.md (reported line 158)May include surrounding context.
bash
# Drop SKILL.md into your OpenClaw skills workspace mkdir -p ~/.openclaw/workspace/skills/codivupload cp SKILL.md ~/.openclaw/workspace/skills/codivupload/SKILL.md # Optional: install the MCP server (gives the agent direct tool access).

Skill Enumeration

Medium

Category: Agent Snooping
Confidence: 80% confidence
Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Content: Scanner excerpt · README.md (reported line 159)May include surrounding context.
bash
# Drop SKILL.md into your OpenClaw skills workspace mkdir -p ~/.openclaw/workspace/skills/codivupload cp SKILL.md ~/.openclaw/workspace/skills/codivupload/SKILL.md # Optional: install the MCP server (gives the agent direct tool access). # IMPORTANT: use an EXACT version pin — no caret, no tilde, no `latest`.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 88% confidence
Finding: The compatibility section suggests testing with npx codivupload-mcp, which resolves and executes whatever version npm serves at runtime. In a credentialed environment, this increases supply-chain risk because a compromised package release or dependency could execute arbitrary code and access inherited secrets such as CODIVUPLOAD_API_KEY.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The activation trigger is broad enough to match generic posting or upload requests that may be unrelated to this service. In an agent environment, overbroad triggering can cause the skill to activate unexpectedly and steer users toward credentialed network actions or external account setup they did not intend.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 229)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 315)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 375)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 402)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 429)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 445)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 478)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 489)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 510)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 538)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 557)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 580)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 597)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 615)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 649)May include surrounding context.
md
CodivUpload is a social media platform with **three first-class interfaces**: 1. **Visual dashboard** — drag-drop calendar, AI captions, team workspaces 2. **REST API** — `https://api.codivupload.com/v1/*` with 50+ platform-specific override params 3. **MCP server** — `npx codivupload-mcp` adds posting tools to Claude/ChatGPT/Cursor/Zed (optional, version-pinned) It covers **7+ launched platforms**: YouTube, Instagram, Facebook, X (Twitter), TikTok, Threads, Pinterest. **Bluesky** is in active rollout (account approval required — skill auto-detects new platforms via the API once available).

Static analysis

No suspicious patterns detected.

Overview

A.I.G

T08 · Insecure Dependencies

Vulnerability Details

Vulnerable Code Snippets

Remediation Suggestions

SkillSpector

Tool Parameter Abuse

Tool Parameter Abuse

Tool Parameter Abuse

Tool Parameter Abuse

Tool Parameter Abuse

Session Persistence

Skill Enumeration

Rp1

Rp1

Vague Triggers

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

Static analysis